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ABSTRACT: 

PURPOSETo flexibly change the right to access and facilitate its management as to access right 
management for managing the adequacy of a process request in an information system which 
offers plural information process services to plural users. 

CONSTITUTIONThe access right management device has a user qualification file 41 which 
holds records consisting of user IDs and qualification IDs as items, an access right files 42 
consisting of service IDs, qualification IDS or user IDs, the kinds of access and whether or not 
the access is allowed, and the priority of records as items, a request acceptance means 1 , an 
access right determination means 2, an access right holding means 3, and a service start means 
5. The access right determination means 2 takes a qualification ID out of the user qualification file 
41 based on the user ID as a key, retrieves the access right file 42 based on the qualification ID 
and the user ID as keys, and determines and holds whether or not final access is allowed with a 
high-priority record regarding the same service in the access right holding means 3. 
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